CVE-2026-96432

LOWCVSS 2.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a null pointer, and then send a PUSH_PROMISE for that stream, causing a null pointer dereference in the QNetworkAccessManager class of the Qt Network module that crashes the application.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

telefon-treff.de@telefontreff1d
#AusweisApp Update: Behebung einer Sicherheitslücke, durch die Server die Anwendung zum Absturz bringen könnten (CVE-2026-96432, CVE-2026-95620). Behebung einer Sicherheitslücke, durch die Server die Anwendung dazu bringen können, nicht mehr zu reagieren(CVE-2026-16762). https://t.co/3aEvI8ANWu
0000061
485 followersView on X

Explore more

Back to dashboard